OpenSSL CSR Wizard
Our OpenSSL CSR Wizard is the fastest way to create your CSR for Apache (or any platform) using OpenSSL.
Fill in the details, click Generate, then paste your customized OpenSSL CSR command in to your terminal.
Note: After 2015, certificates for internal names will no longer be trusted.
Common Name (Server Name)
The fully qualified domain name that clients will use to reach your server.
For example, to secure https://www.example.com, your common name must be www.example.com
or *.example.com for a wildcard certificate.
Although less common, you may also enter the
public IP address of your server.
This information is not required. You can leave this field blank.
For private TLS/SSL certificates, this is the department within your organization that you want to appear in the certificate. It will be listed in the certificate's subject as Organizational Unit, or "ou."
*Note: Industry regulations no longer allow Certificate Authorities (CAs) to include the department (organization unit) in public TLS/SSL certificates. See our knowledge base article: DigiCert will deprecate the Organizational Unit field.
The city where your organization is legally located.
State or Province
The state or province where your organization is legally located.
We guessed your country based on your IP address, but if we guessed wrong, please choose the correct country. If your country does not appear in this list, there is a chance we cannot issue certificates to organizations in your country.
The exact legal name of your organization, (e.g., DigiCert, Inc.)
If you do not have a legal registered organization name, you should enter your own full name here.
RSA Key sizes smaller than 2048 are considered unsecure.
Now just copy and paste this command into a terminal session on your server. Your CSR will be written to ###FILE###.csr.
After you've created a Certificate Signing Request (CSR) and ordered your certificate, you still need to install the SSL certificate on your server.
For instructions on how to install SSL certificates, see SSL Certificate Installation Instructions & Tutorials.
Where do I paste this command?
You can run this command wherever you have OpenSSL available—most likely on your server, but you can also run it on your own computer if you have installed OpenSSL locally. Just make sure you keep track of your private key file after you create your CSR; you'll need that private key to install your certificate.
What happens when I run this command?
OpenSSL creates both your private key and your certificate signing request, and saves them to two files: your_common_name.key, and your_common_name.csr. You can then copy the contents of the CSR file and paste it into the CSR text box in our order form.
What kind of certificate should I buy?
A DigiCert Wildcard can protect all server names on your domain (e.g., *.example.com,).
|Per Year Pricing|
|2 Years||$625 per year||($1,250)||(You Save 10%)||Buy Now|
|1 Year||$658||Buy Now|
Standard certificates are able to protect one server name (e.g., mail.example.com). If you only need SSL for one hostname, a Standard certificate will work perfectly.
|Per Year Pricing|
|2 Years||$188 per year||($376)||(You Save 10%)||Buy Now|
|1 Year||$198||Buy Now|
What If I Need Subject Alternative Names?
Using OpenSSL to Add Subject Alternative Names to a CSR is a complicated task. Our advice is to skip the hassle, use your most important server name as the Common Name in the CSR, and then specify the other names during the order process. Our Multi-Domain (SAN) certificate ordering process allows you to specify all the names you need without making you include them in the CSR.